changed to load assets via https